@open-agent-toolkit/cli 0.1.66 → 0.1.72

package/assets/skills/oat-project-review-provide/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: oat-project-review-provide
-version: 1.3.16
+version: 1.3.20
 description: Use when the user explicitly asks to review an OAT project — e.g. "review project", "review the project", "run project review", or confirms a previously offered review. Do NOT auto-invoke on completed work alone. Resolves a project review scope and offers before running.
 disable-model-invocation: false
 user-invocable: true
@@ -584,6 +584,17 @@ candidate ladder, fail closed before review. Route interactive repair through
 the planning workflow's `Complete Dispatch Ladder Adoption Contract`; do not
 invent a reviewer target.
 
+**Pre-plan policy inheritance:** When the resolver returns
+`unresolvedReason: 'policy'`, and only then, an `artifact` review whose scope is
+`discovery`, `design`, or `spec` does not block or prompt. Review by deliberate
+inheritance in the current context and record
+`selection_reason: inherit (pre-plan; no project policy)`. An explicitly set
+project policy is always honored, including for pre-plan artifacts. Code
+reviews and `artifact plan` reviews still hard-require a resolved policy.
+Missing or incomplete ladder results (`unresolvedReason: 'ladder' | 'both'`)
+still fail closed. Gate exec-target selection is unaffected by this
+inheritance rule because gates resolve their target independently.
+
 After constructing the complete provider payload, record the launcher-owned
 `target`, `model_axis`, and `effort_axis` with
 `launcher-selected/config-declared` provenance. These fields are immutable:
@@ -609,6 +620,56 @@ managed base role is forbidden except for
 explicit inherit/default behavior or the documented managed-uncapped reviewer
 fallback.
 
+**Step 6.1: Headless gate route (overrides normal tier selection)**
+
+When either prompt frontmatter has `oat_gate_headless: true` or the environment
+has `OAT_GATE_HEADLESS=1`, copy the expected runtime and model from
+`oat_gate_runtime` and `oat_invocation_model`, determine whether this host has
+an awaited-child capability, and use the gate-provided branch-local CLI path.
+Fail closed with `OAT_GATE_REFUSAL` if `OAT_GATE_CLI_PATH` is absent or not
+executable. Run the route command and validate its JSON before using it:
+
+```bash
+ROUTE_JSON="$("$OAT_GATE_CLI_PATH" gate route --json \
+  --expect-runtime "$OAT_GATE_RUNTIME" \
+  --expect-model "$OAT_INVOCATION_MODEL" \
+  --can-await true)"
+
+OAT_GATE_ROUTE_JSON="$ROUTE_JSON" node -e '
+const value = JSON.parse(process.env.OAT_GATE_ROUTE_JSON);
+if (!["inline", "delegate-sync", "refuse"].includes(value.route) ||
+    typeof value.reason !== "string") process.exit(1);
+if (value.cliRoot !== process.env.OAT_GATE_CLI_ROOT) process.exit(1);
+process.stdout.write(JSON.stringify(value));
+'
+```
+
+Pass `--can-await false` when this host cannot synchronously await delegated
+review completion. An absent command, command failure, help/non-JSON output,
+invalid envelope, or `cliRoot` different from `OAT_GATE_CLI_ROOT` is a
+structured refusal; never retry with bare `oat` or another installed CLI. Do
+not make a separate runtime/model identity judgment in skill prose; follow the
+validated helper route:
+
+In the terminal headless response, report
+`Gate route: <route> (runtime=<expected-runtime>, cliRoot=<validated-cliRoot>)`
+so the parent can retain branch-local route evidence.
+
+- `inline`: execute the complete `oat-reviewer` role contract in the current
+  context, write the artifact, and finish bookkeeping before returning.
+- `delegate-sync`: dispatch through an awaited handle, then verify the expected
+  artifact exists and carries the matching `oat_gate_run_id` before returning.
+  A terminal `BLOCKED`, interruption, timeout, or missing/mismatched artifact
+  remains terminal and must not trigger a second launch.
+- `refuse`: print `OAT_GATE_REFUSAL: <reason from route output>` on its own
+  line. Exit nonzero where the host permits; the gate classifies this line
+  independently of exit code.
+
+Headless gate mode overrides the Tier 1 background-dispatch preference:
+NEVER use fire-and-forget background dispatch in this mode. The review and its
+artifact/bookkeeping completion must be inline or synchronously awaited before
+the gate child exits.
+
 **Step 6a: Probe Subagent Availability**
 
 Before selecting a tier, announce the probe and its result so the user can see what's happening:
@@ -842,7 +903,7 @@ Run the `oat-project-review-receive` skill to convert findings into plan tasks.
 
 After review artifact is written, update `plan.md` `## Reviews` table _if plan.md exists_.
 
-Update or add a row matching `{scope}`:
+Record this artifact as one append-ordered review event:
 
 - `Scope`: `{scope}` (examples: `p02`, `final`, `spec`, `design`)
   - Phase-range examples such as `p02-p03` are valid code-review scopes and should be preserved exactly.
@@ -851,6 +912,11 @@ Update or add a row matching `{scope}`:
 - `Date`: `{today}`
 - `Artifact`: `reviews/{filename}.md`
 
+For the first event with this Scope + Type, claim an unbound `pending`
+placeholder only when its Artifact is `-`. Otherwise append a new row for the
+new artifact. Never replace or regress a bound event merely because Scope +
+Type matches; distinct artifact filenames are distinct review events.
+
 If plan.md is missing (e.g., spec/design review before planning), skip this update and rely on the review artifact + next-step routing.
 
 ### Step 9.5: Commit Review Bookkeeping Atomically (Required)

package/assets/skills/oat-project-review-receive/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: oat-project-review-receive
-version: 1.5.7
+version: 1.5.9
 description: Use when the user explicitly asks to receive review findings for an OAT project — e.g. "receive review", "process review", "process the project review", or confirms a previously offered review-receive step. Do NOT auto-invoke merely because a review file exists. Resolves the latest review and offers before acting.
 disable-model-invocation: false
 user-invocable: true
@@ -102,7 +102,7 @@ PROJECTS_ROOT="${PROJECTS_ROOT%/}"
 
 ```bash
 if [ -n "${PROJECT_PATH:-}" ] && [ -d "$PROJECT_PATH" ]; then
-  oat review latest --project "$PROJECT_PATH" --json
+  oat review latest --project "$PROJECT_PATH" --actionable-project --json
 else
   oat review latest --json
 fi
@@ -110,11 +110,13 @@ fi
 
 Selection rules:
 
-- Use `oat review latest` as the first-choice resolver. It scans project reviews (`reviews/` and `reviews/archived/`) plus ad-hoc review locations and orders candidates by `oat_generated_at` frontmatter rather than filesystem mtime. Review artifacts carry a seconds-precision `oat_generated_at` and a matching timestamped filename, so same-scope same-day re-gates order deterministically and the newest round wins — never assume the plain `<scope>-review-<date>.md` name is current.
+- With a valid project, use the `--actionable-project` path first. It resolves only an active/actionable project review from the top-level `reviews/` directory, so newer historical artifacts in `reviews/archived/` cannot strand an older active event.
+- If the actionable-project result has `path: null`, run `oat review latest --json` without `--actionable-project` to discover the latest ad-hoc target or report project history. The default resolver intentionally preserves all-history ordering across project (`reviews/` and `reviews/archived/`) and ad-hoc locations.
+- Both resolver paths order candidates by `oat_generated_at` frontmatter rather than filesystem mtime. Review artifacts carry a seconds-precision `oat_generated_at` and a matching timestamped filename, so same-scope same-day re-gates order deterministically and the newest round wins — never assume the plain `<scope>-review-<date>.md` name is current.
 - Read the JSON result:
   - `path: null` means no review target was found.
   - `kind: "project"` and `actionable: true` means this skill can process the target when the path is an active top-level project review.
-  - `archived: true` or `actionable: false` means the target is historical/non-actionable for project review-receive.
+  - An `archived: true` or `actionable: false` result from the all-history fallback means no active project review was resolved and the selected result is historical/non-actionable for project review-receive.
   - `kind: "adhoc"` means route to `oat-review-receive` after offering that handoff to the user.
 - Only process active project review artifacts in the top level of `"$PROJECT_PATH/reviews/"`.
 - Treat archived project artifacts as history only; do not receive them automatically. If `oat review latest` returns an archived project review, tell the user no active project review is waiting and offer to run `oat-project-review-provide`.
@@ -140,11 +142,32 @@ Use this fallback only for active project reviews. It cannot discover ad-hoc rev
 Derive archive bookkeeping before making lifecycle edits:
 
 ```bash
-REVIEW_FILENAME=$(basename "$REVIEW_PATH")
+SOURCE_REVIEW_FILENAME=$(basename "$REVIEW_PATH")
+REVIEW_FILENAME="$SOURCE_REVIEW_FILENAME"
 ARCHIVED_REVIEW_DIR="$PROJECT_PATH/reviews/archived"
 ARCHIVED_REVIEW_PATH="$ARCHIVED_REVIEW_DIR/$REVIEW_FILENAME"
+
+if [[ -e "$ARCHIVED_REVIEW_PATH" ]]; then
+  REVIEW_STEM="${SOURCE_REVIEW_FILENAME%.md}"
+  ARCHIVE_TIMESTAMP=$(date -u +%Y-%m-%dT%H%M%SZ)
+  REVIEW_FILENAME="${REVIEW_STEM}-${ARCHIVE_TIMESTAMP}.md"
+  ARCHIVED_REVIEW_PATH="$ARCHIVED_REVIEW_DIR/$REVIEW_FILENAME"
+  ARCHIVE_COLLISION_INDEX=2
+
+  while [[ -e "$ARCHIVED_REVIEW_PATH" ]]; do
+    REVIEW_FILENAME="${REVIEW_STEM}-${ARCHIVE_TIMESTAMP}-${ARCHIVE_COLLISION_INDEX}.md"
+    ARCHIVED_REVIEW_PATH="$ARCHIVED_REVIEW_DIR/$REVIEW_FILENAME"
+    ARCHIVE_COLLISION_INDEX=$((ARCHIVE_COLLISION_INDEX + 1))
+  done
+fi
 ```
 
+`SOURCE_REVIEW_FILENAME` identifies the selected active event before archival.
+`REVIEW_FILENAME` and `ARCHIVED_REVIEW_PATH` are the collision-free final
+identity and destination. Resolve them here, before writing plan,
+implementation, or artifact-review references. Never choose a different
+basename later in either receive path.
+
 ### Step 2: Parse Findings into Buckets
 
 Extract findings from the review artifact and categorize:
@@ -382,7 +405,9 @@ Add new tasks to plan.md in the target phase. When adding or editing tasks, pres
 
 **Review-fix bookkeeping (required):**
 - When you add review-generated fix tasks:
-  - Update the relevant Reviews table row status to `fixes_added` (work queued) and set the Date + Artifact.
+  - Locate the Reviews event matching the selected review's Scope, Type, and `SOURCE_REVIEW_FILENAME`, then update it to `fixes_added` (work queued), set the Date, and replace its Artifact with `reviews/archived/$REVIEW_FILENAME`.
+  - The written `REVIEW_FILENAME` becomes the event's artifact filename and identity for every later mutation; use the already-resolved final basename in every plan and implementation reference.
+  - Never select a row by scope alone or move an event status backward. If the exact bound event is missing, stop and reconcile the ledger instead of mutating another event.
   - Update `## Implementation Complete` totals (phase counts + total task count) so downstream PR/review summaries don’t go stale.
   - If the plan includes any phase rollups that reference task counts, update those too.
 
@@ -399,10 +424,11 @@ Add new tasks to plan.md in the target phase. When adding or editing tasks, pres
 **Update Reviews section:**
 ```markdown
 ## Reviews
-- Update or add a row for `{scope}` in the Reviews table:
+- Find the existing event by `{scope}`, review Type, and
+  `$SOURCE_REVIEW_FILENAME`, then update only that row:
   - Status: `fixes_added` (if tasks were added) or `passed` (if no Critical/Important/Medium and no unresolved final-scope gates)
   - Date: `{today}`
-  - Artifact: `reviews/archived/{filename}.md`
+  - Artifact: `reviews/archived/$REVIEW_FILENAME`
 ````
 
 **Status semantics (v1):**
@@ -410,6 +436,7 @@ Add new tasks to plan.md in the target phase. When adding or editing tasks, pres
 - `fixes_added`: fix tasks were created and added to the plan
 - `fixes_completed`: fix tasks implemented, awaiting re-review
 - `passed`: re-review completed and recorded as passing (no unresolved Critical/Important/Medium, and all final-scope gates satisfied: deferred-medium + minor disposition)
+- Status changes are monotonic. Never move an event status backward, replace an earlier event, or update a different event that happens to share the same scope/type.
 
 ### Step 7: Update Implementation.md
 
@@ -419,7 +446,7 @@ Add a note to implementation.md:
 ### Review Received: {scope}
 
 **Date:** {today}
-**Review artifact:** reviews/archived/{filename}.md
+**Review artifact:** reviews/archived/$REVIEW_FILENAME
 
 **Findings:**
 
@@ -438,7 +465,7 @@ Add a note to implementation.md:
 
 After the fix tasks are complete:
 
-- Update the review row status to `fixes_completed`
+- Update this same artifact-identified review event to `fixes_completed`
 - Re-run `oat-project-review-provide {type} {scope}` then `oat-project-review-receive` to reach `passed`
 ```
 
@@ -468,8 +495,8 @@ mv "$REVIEW_PATH" "$ARCHIVED_REVIEW_PATH"
 
 Rules:
 
-- Perform the move only after all written references have been updated to `reviews/archived/{filename}.md`.
-- If `"$ARCHIVED_REVIEW_PATH"` already exists, append a timestamp suffix before moving so history is preserved.
+- Perform the move only after all written references and event identity have been updated to `reviews/archived/$REVIEW_FILENAME`.
+- Use the `REVIEW_FILENAME` and `ARCHIVED_REVIEW_PATH` resolved in Step 1. Do not rename or re-resolve the destination here.
 - Report the archived location in the final summary.
 
 ### Step 7.6: Commit Review Bookkeeping (Required)
@@ -647,8 +674,9 @@ mkdir -p "$ARCHIVED_REVIEW_DIR"
 mv "$REVIEW_PATH" "$ARCHIVED_REVIEW_PATH"
 ```
 
-- Perform the move only after all artifact edits are applied and any written references point to `reviews/archived/{filename}.md`.
-- If `"$ARCHIVED_REVIEW_PATH"` already exists, append a timestamp suffix before moving so history is preserved.
+- Before the move, use the Step 1 `REVIEW_FILENAME` for every artifact-review reference or event identity written by the approved edits.
+- Perform the move only after all artifact edits are applied and every written reference points to `reviews/archived/$REVIEW_FILENAME`.
+- Use the Step 1 `ARCHIVED_REVIEW_PATH` unchanged. Do not rename or re-resolve the destination here.
 
 **Then route:**
 
@@ -662,14 +690,14 @@ mv "$REVIEW_PATH" "$ARCHIVED_REVIEW_PATH"
 ```
 Review received for {project-name}.
 
-Review: {review_filename}
+Review: $REVIEW_FILENAME
 Scope: {scope}
 Findings: {N} critical, {N} important, {N} medium, {N} minor
 
 Actions taken:
 - Added {N} fix tasks to plan.md ({task_ids})
 - Updated implementation.md with review notes
-- Archived review artifact to `reviews/archived/{filename}.md`
+- Archived review artifact to `reviews/archived/$REVIEW_FILENAME`
 - Deferred/accepted Medium findings: {N}
 - Minor findings dispositioned: {N} converted (default), {N} deferred-with-rationale (explicit user decision required for final scope)
 - Finding disposition map: {ID -> converted|deferred|accepted + rationale summary}
@@ -684,13 +712,13 @@ For `artifact` reviews, summarize instead:
 ```
 Review received for {project-name}.
 
-Review: {review_filename}
+Review: $REVIEW_FILENAME
 Scope: {scope}
 Findings: {N} critical, {N} important, {N} medium, {N} minor
 
 Actions taken:
 - Applied {N} artifact edits
-- Archived review artifact to `reviews/archived/{filename}.md`
+- Archived review artifact to `reviews/archived/$REVIEW_FILENAME`
 - No plan tasks created
 - Finding disposition map: {ID -> resolve_in_artifact|rejected_with_rationale|needs_user_direction}
 

package/assets/skills/oat-project-review-receive-remote/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: oat-project-review-receive-remote
-version: 1.4.0
+version: 1.4.2
 description: Use when processing GitHub PR review comments within project context. Fetches PR comments, creates plan tasks, and updates project artifacts.
 disable-model-invocation: true
 user-invocable: true
@@ -117,9 +117,22 @@ npx agent-reviews --json --unresolved --pr <N>
 
 If no unresolved comments:
 
-- Report clean status.
-- Update `plan.md` review row for scoped entry to `passed` when applicable.
-- Stop.
+1. Create a UTC timestamp and event-distinct filename:
+   `reviews/archived/remote-pr-<N>-review-YYYY-MM-DDTHHMMSSZ.md`.
+2. Ensure `reviews/archived/` exists, then write that artifact with the PR
+   number, fetch timestamp, remote scope/type, and a zero-unresolved-findings
+   result. A clean remote review is consumed as it is recorded, so it must not
+   remain in top-level `reviews/`.
+3. Record the clean result as a `passed` Reviews event whose event identity
+   combines `Scope`, `Type`, and artifact filename:
+   - Claim only an unbound `pending` placeholder with matching Scope + Type and
+     Artifact `-`; otherwise append a distinct row.
+   - Set Date and Artifact to this clean event. Advance only this event and
+     never mutate another row by scope alone.
+4. Commit `plan.md` and the clean review artifact atomically with
+   `chore(oat): record clean remote review (pr-#<N>)`. Do not stop with
+   uncommitted bookkeeping.
+5. Report clean status and stop.
 
 ### Step 3: Classify and Normalize Findings
 
@@ -162,14 +175,34 @@ For each converted finding:
 
 ### Step 6: Update Project Artifacts
 
+Before changing the ledger, write an event-distinct review artifact containing
+the PR number, fetch timestamp, normalized findings, and dispositions:
+`reviews/archived/remote-pr-<N>-review-YYYY-MM-DDTHHMMSSZ.md`. Remote receive
+fully dispositions the event as `passed` or `fixes_added`, so the artifact is
+consumed immediately and belongs in `reviews/archived/`, not top-level
+`reviews/`. Each fetch/triage cycle gets a new timestamped artifact filename,
+even when the PR and lifecycle scope are unchanged.
+
+```bash
+REMOTE_REVIEW_TIMESTAMP=$(date -u +%Y-%m-%dT%H%M%SZ)
+REMOTE_REVIEW_FILENAME="remote-pr-${PR_NUMBER}-review-${REMOTE_REVIEW_TIMESTAMP}.md"
+mkdir -p "$PROJECT_PATH/reviews/archived"
+REMOTE_REVIEW_PATH="$PROJECT_PATH/reviews/archived/$REMOTE_REVIEW_FILENAME"
+```
+
 Update `plan.md`:
 
 - Append inserted review-fix task sections in correct phase order.
-- Update `## Reviews` row for remote scope:
+- Record an append-ordered `## Reviews` event for the remote scope:
   - status `fixes_added` when tasks were added
   - status `passed` when no actionable findings remain
   - date set to today
-  - artifact `github-pr #<N>`
+  - artifact `reviews/archived/remote-pr-<N>-review-YYYY-MM-DDTHHMMSSZ.md`
+- Claim an unbound `pending` placeholder only when its Scope + Type matches and
+  its Artifact is `-`; otherwise append the event. Later mutations select it by
+  Scope + Type + artifact filename, never by scope or `github-pr #<N>` alone.
+- Never move an event status backward or overwrite an earlier event from the
+  same PR.
 - Update `## Implementation Complete` totals.
 
 Update `implementation.md`:
@@ -192,12 +225,12 @@ Update `state.md`:
 
 ### Step 6.5: Commit Review Bookkeeping (Required)
 
-**CRITICAL — DO NOT SKIP.** This skill modifies `plan.md`, `implementation.md`, and `state.md` when processing GitHub PR comments. When it runs in a separate agent session (subagent, fresh session, or different conversation), uncommitted bookkeeping updates cause state drift for the original agent. The commit below is the safety net.
+**CRITICAL — DO NOT SKIP.** This skill modifies the event-distinct review artifact, `plan.md`, `implementation.md`, and `state.md` when processing GitHub PR comments. When it runs in a separate agent session (subagent, fresh session, or different conversation), uncommitted bookkeeping updates cause state drift for the original agent. The commit below is the safety net.
 
 Commit all modified OAT tracking files atomically:
 
 ```bash
-git add "$PROJECT_PATH/plan.md" "$PROJECT_PATH/implementation.md" "$PROJECT_PATH/state.md"
+git add "$PROJECT_PATH/plan.md" "$PROJECT_PATH/implementation.md" "$PROJECT_PATH/state.md" "$REMOTE_REVIEW_PATH"
 git diff --cached --quiet || git commit -m "chore(oat): record remote review findings and add fix tasks (pr-#$PR_NUMBER)"
 ```
 

package/dist/commands/cleanup/project/project.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project.utils.d.ts","sourceRoot":"","sources":["../../../../src/commands/cleanup/project/project.utils.ts"],"names":[],"mappings":"AAQA,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,OAAO,CAG1E;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,OAAO,CAG1E;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAErE;AAED,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED,wBAAgB,6BAA6B,CAC3C,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GACnB,OAAO,CAKT;AAED,wBAAgB,0BAA0B,CACxC,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,MAAM,CAMR;AAED,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAkB1E"}
+{"version":3,"file":"project.utils.d.ts","sourceRoot":"","sources":["../../../../src/commands/cleanup/project/project.utils.ts"],"names":[],"mappings":"AAQA,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,OAAO,CAG1E;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,OAAO,CAG1E;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CA8BrE;AAED,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED,wBAAgB,6BAA6B,CAC3C,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GACnB,OAAO,CAKT;AAED,wBAAgB,0BAA0B,CACxC,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,MAAM,CAMR;AAED,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAkB1E"}

package/dist/commands/cleanup/project/project.utils.js

@@ -14,7 +14,25 @@ export function projectNeedsStateFile(fileNames) {
     return !files.has('state.md') && hasLifecycleArtifacts(files);
 }
 export function projectPlanMarksComplete(planContent) {
-    return /\|\s*final\s*\|\s*code\s*\|\s*passed\s*\|/i.test(planContent);
+    const reviewsHeading = /^## Reviews[ \t]*\r?$/m.exec(planContent);
+    if (!reviewsHeading) {
+        return false;
+    }
+    const afterHeading = planContent.slice(reviewsHeading.index + reviewsHeading[0].length);
+    const nextSectionIndex = afterHeading.search(/^##(?!#)[ \t]+\S.*\r?$/m);
+    const reviewsSection = nextSectionIndex === -1
+        ? afterHeading
+        : afterHeading.slice(0, nextSectionIndex);
+    const finalCodeEvents = reviewsSection
+        .split('\n')
+        .filter((line) => line.trim().startsWith('|'))
+        .map((line) => line
+        .split('|')
+        .slice(1, -1)
+        .map((cell) => cell.trim()))
+        .filter(([scope, type]) => scope?.toLowerCase() === 'final' && type?.toLowerCase() === 'code');
+    const latestFinalCodeEvent = finalCodeEvents[finalCodeEvents.length - 1];
+    return latestFinalCodeEvent?.[2]?.toLowerCase() === 'passed';
 }
 export function stateLifecycleIsComplete(stateContent) {
     return /^oat_lifecycle:\s*complete$/m.test(stateContent);

package/dist/commands/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/config/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEhF,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,iCAAiC,CAAC;AAezC,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,cAAc,EAGnB,KAAK,UAAU,EAehB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAGL,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mCAAmC,EACnC,0BAA0B,EAC3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmFpC,UAAU,yBAAyB;IACjC,mBAAmB,EAAE,CACnB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,KAC/C,cAAc,CAAC;IACpB,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,mCAAmC,EAAE,OAAO,mCAAmC,CAAC;IAChF,0BAA0B,EAAE,OAAO,0BAA0B,CAAC;IAC9D,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;CAC/B;AAg5DD,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,OAAO,CAAC,yBAAyB,CAAM,GACjD,OAAO,CAsKT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/config/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEhF,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,iCAAiC,CAAC;AAezC,OAAO,EAML,KAAK,SAAS,EACd,KAAK,cAAc,EAGnB,KAAK,UAAU,EAehB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAGL,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mCAAmC,EACnC,0BAA0B,EAC3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuFpC,UAAU,yBAAyB;IACjC,mBAAmB,EAAE,CACnB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,KAC/C,cAAc,CAAC;IACpB,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClE,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,mBAAmB,EAAE,CACnB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,EAAE,CAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,mCAAmC,EAAE,OAAO,mCAAmC,CAAC;IAChF,0BAA0B,EAAE,OAAO,0BAA0B,CAAC;IAC9D,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;CAC/B;AAg+DD,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,OAAO,CAAC,yBAAyB,CAAM,GACjD,OAAO,CAsKT"}

package/dist/commands/config/index.js

@@ -7,7 +7,7 @@ import { readGlobalOptions } from '../shared/shared.utils.js';
 import { compileDispatchCeilingPreset } from '../../config/dispatch-ceiling-preset.js';
 import { normalizeDispatchMatrix, validateDispatchRouteTarget, walkDispatchMatrix, } from '../../config/dispatch-matrix.js';
 import { dispatchPolicyModeDescription, dispatchPolicyPolicyDescription, managedDispatchPolicyValueList, } from '../../config/dispatch-policy-options.js';
-import { VALID_DISPATCH_POLICY_MODES, VALID_MANAGED_DISPATCH_POLICIES, normalizeWorkflowPostImplementSequence, readOatConfig, readOatLocalConfig, readUserConfig, writeOatConfig, writeOatLocalConfig, writeUserConfig, } from '../../config/oat-config.js';
+import { VALID_DISPATCH_POLICY_MODES, VALID_MANAGED_DISPATCH_POLICIES, MAX_GATE_TIMEOUT_MS, MIN_GATE_TIMEOUT_MS, isValidGateTimeoutMs, normalizeWorkflowPostImplementSequence, readOatConfig, readOatLocalConfig, readUserConfig, writeOatConfig, writeOatLocalConfig, writeUserConfig, } from '../../config/oat-config.js';
 import { resolveEffectiveConfig, } from '../../config/resolve.js';
 import { resolveAssetsRoot } from '../../fs/assets.js';
 import { resolveProjectRoot } from '../../fs/paths.js';
@@ -63,6 +63,8 @@ const KEY_ORDER = [
     'workflow.dispatchCeiling.preset',
     'workflow.dispatchCeiling.providers.codex',
     'workflow.dispatchCeiling.providers.claude',
+    'workflow.gateTimeouts.code',
+    'workflow.gateTimeouts.artifact',
     'worktrees.root',
 ];
 const CONFIG_CATALOG = [
@@ -583,6 +585,8 @@ const DEFAULT_DEPENDENCIES = {
 };
 function isConfigKey(value) {
     return (KEY_ORDER.includes(value) ||
+        value === 'workflow.dispatchCeiling' ||
+        value === 'workflow.dispatchCeiling.providers' ||
         isDispatchCeilingProviderKey(value));
 }
 function isDispatchCeilingProviderKey(value) {
@@ -758,6 +762,14 @@ function parseWorkflowValue(key, rawValue) {
             return sequence;
         }
     }
+    if (key === 'workflow.gateTimeouts.code' ||
+        key === 'workflow.gateTimeouts.artifact') {
+        const value = Number(rawValue);
+        if (!isValidGateTimeoutMs(value)) {
+            throw new Error(`Invalid value for ${key}: expected an integer between ${MIN_GATE_TIMEOUT_MS} and ${MAX_GATE_TIMEOUT_MS}`);
+        }
+        return value;
+    }
     const allowed = WORKFLOW_ENUM_VALUES[key];
     if (allowed) {
         const normalized = rawValue.trim();
@@ -875,6 +887,16 @@ function applyWorkflowValue(workflow, key, value) {
             postImplementSequence: value,
         };
     }
+    if (subKey.startsWith('gateTimeouts.')) {
+        const timeoutKey = subKey.slice('gateTimeouts.'.length);
+        return {
+            ...workflow,
+            gateTimeouts: {
+                ...workflow.gateTimeouts,
+                [timeoutKey]: value,
+            },
+        };
+    }
     if (subKey === 'dispatchPolicy.mode') {
         const mode = value;
         if (mode === 'inherit') {
@@ -991,6 +1013,10 @@ async function getConfigValue(repoRoot, userConfigDir, key, dependencies, preser
     const resolved = await dependencies.resolveEffectiveConfig(repoRoot, userConfigDir, dependencies.processEnv);
     const entry = resolved.resolved[key];
     if (!entry) {
+        const aggregate = buildResolvedConfigAggregate(resolved, key);
+        if (aggregate) {
+            return { key, ...aggregate };
+        }
         return { key, value: null, source: 'default' };
     }
     return {
@@ -1001,6 +1027,44 @@ async function getConfigValue(repoRoot, userConfigDir, key, dependencies, preser
         source: entry.source,
     };
 }
+function buildResolvedConfigAggregate(resolved, key) {
+    const prefix = `${key}.`;
+    const entries = Object.entries(resolved.resolved).filter(([entryKey]) => entryKey.startsWith(prefix));
+    if (entries.length === 0) {
+        return null;
+    }
+    const value = {};
+    let source = 'default';
+    const sourceRank = {
+        default: 0,
+        user: 1,
+        shared: 2,
+        local: 3,
+        env: 4,
+    };
+    for (const [entryKey, entry] of entries) {
+        if (sourceRank[entry.source] > sourceRank[source]) {
+            source = entry.source;
+        }
+        const parts = entryKey.slice(prefix.length).split('.');
+        let cursor = value;
+        for (const [index, part] of parts.entries()) {
+            if (index === parts.length - 1) {
+                cursor[part] = entry.value;
+            }
+            else {
+                const nested = cursor[part];
+                if (typeof nested !== 'object' ||
+                    nested === null ||
+                    Array.isArray(nested)) {
+                    cursor[part] = {};
+                }
+                cursor = cursor[part];
+            }
+        }
+    }
+    return { value, source };
+}
 async function listConfigKeys(repoRoot, userConfigDir, dependencies) {
     const resolved = await dependencies.resolveEffectiveConfig(repoRoot, userConfigDir, dependencies.processEnv);
     const staticKeys = new Set(KEY_ORDER);

package/dist/commands/gate/__fixtures__/fake-runtime.d.mts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=fake-runtime.d.mts.map

package/dist/commands/gate/__fixtures__/fake-runtime.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-runtime.d.mts","sourceRoot":"","sources":["../../../../src/commands/gate/__fixtures__/fake-runtime.mjs"],"names":[],"mappings":""}